Lucene search
+L

4 matches found

OSV
OSV
added 2018/11/09 5:43 p.m.38 views

GHSA-9FG5-F5PJ-RWCC gruntcli is malware

The gruntcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References3
Rows per page
Query Builder